WhiteNightShadow/hello_js_reverse_skill

What it solves

This project provides a comprehensive toolkit and methodology for JavaScript reverse engineering. It specifically addresses the challenges of analyzing Web APIs to bypass anti-scraping measures, such as complex interface signatures, JS obfuscation, custom Virtual Machines (JSVMP), and dynamic Cookie generation, allowing developers to replicate these processes in Node.js or Python.

How it works

The project functions as a "Skill" for AI agents (like Cursor, Claude Code, or Codex), providing them with a structured framework, reference documents, and tool templates to perform reverse engineering. It integrates with the camoufox-reverse MCP server to use an anti-detection browser for source code searching, hook injection, and network analysis. The workflow involves identifying the anti-scraping type, tracing the signature generation chain through hooking or instrumentation, and then implementing the logic using provided templates for pure algorithm restoration, VM sandboxing, or WASM loading.

Who it’s for

It is designed for developers and security researchers who need to perform web data collection, analyze encrypted API requests, or bypass advanced bot detection systems.

Highlights

• Multi-Language Restoration: Supports implementing reversed algorithms in both Node.js and Python.
• Advanced De-obfuscation: Strategies for handling control-flow flattening, OB obfuscation, and JSVMP bytecode analysis.
• Deep Instrumentation: Features source-level instrumentation and JSVMP interpreter hooking to track signature generation.
• Anti-Detection Integration: Uses Camoufox C++ engine-level fingerprinting to avoid detection during analysis.
• Cookie Attribution: Tools to distinguish between HTTP Set-Cookie and JS-generated cookies.
• AI-Ready: Specifically structured as a skill for AI coding agents to automate the analysis process.